Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
File:                     ZePmyEfHm7BarCTUF4F41vfARIU.mft (raw, json)
Hash identifier:          kHTOh6/xHpO40Tq4eFmJMRKkoz6h4WDfQzXv44txdjI=
Subject key identifier:   B8:49:AB:95:05:35:83:1F:B9:FE:20:6E:F0:E7:42:3D:9D:EA:FE:43
Authority key identifier: 65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
Certificate issuer:       /CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Certificate serial:       01987CE571D8018D31E0A03FF1FB87677771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
Manifest number:          02B9
Signing time:             Wed 06 Aug 2025 01:01:08 +0000
Manifest this update:     Wed 06 Aug 2025 01:01:08 +0000
Manifest next update:     Thu 07 Aug 2025 01:01:08 +0000
Files and hashes:         1: ZePmyEfHm7BarCTUF4F41vfARIU.crl (hash: N6u84AnIwEafE+gHssMYWlOAMXg6w4KlJXryzwJRtWQ=)
                          2: _G6b2YObaO8vXwxmRAdxtdM520E.roa (hash: 1ZvsYB4M9L/iBBRu/0d0SPNVtbn8DNDppTZnbpT7L4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:71:d8:01:8d:31:e0:a0:3f:f1:fb:87:67:77:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
        Validity
            Not Before: Aug  6 01:01:08 2025 GMT
            Not After : Aug  7 01:01:08 2025 GMT
        Subject: CN=b849ab950535831fb9fe206ef0e7423d9deafe43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:b9:c8:ca:19:be:b6:2c:fe:f6:b7:f2:3f:
                    a6:6a:0d:9e:47:fc:4a:9b:f3:7f:a9:50:2b:f9:5d:
                    9c:35:7c:76:c1:34:21:f9:40:5c:d8:ce:0a:02:2b:
                    d8:df:55:41:fe:91:16:77:74:38:c7:64:e2:7e:22:
                    62:8d:d8:ee:e9:13:b3:2b:6d:bf:ce:0b:41:63:f8:
                    b4:1b:9b:f9:05:c2:50:64:dd:c3:79:cf:d8:c3:17:
                    0e:e4:d8:24:52:f9:ef:58:85:ba:d8:6c:ee:ad:68:
                    76:0d:52:c9:06:54:a1:26:d8:d5:a8:c6:a4:78:e0:
                    d9:6b:3d:c2:20:ec:4c:b8:f0:51:0c:91:8d:d2:80:
                    98:01:31:02:4f:1b:08:89:fd:56:91:4d:0f:52:9b:
                    a0:a2:7f:79:00:f4:f5:0f:0b:9d:96:68:80:d2:80:
                    0d:bb:ab:3a:22:28:79:65:0a:ea:42:5f:79:5c:fb:
                    57:ae:04:7b:7c:93:4c:49:61:5c:e5:ec:ae:40:3d:
                    ac:9a:8b:69:f3:82:ec:d0:ad:c8:d6:c9:fb:58:b8:
                    f7:a6:b6:2a:3c:df:f5:54:3e:3b:b4:28:6a:16:6f:
                    0d:e4:82:00:c7:8f:a1:78:ba:72:75:f5:67:9e:a3:
                    13:15:fa:4d:94:e5:63:72:95:54:1d:26:22:17:b8:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:49:AB:95:05:35:83:1F:B9:FE:20:6E:F0:E7:42:3D:9D:EA:FE:43
            X509v3 Authority Key Identifier:
                keyid:65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:15:7a:0e:6a:b0:77:04:57:d2:0e:b7:29:ed:54:0f:3e:5f:
         49:0f:07:70:34:96:a3:c6:4d:95:65:ae:d3:ed:b7:9c:7b:ea:
         aa:6b:0b:cc:d3:5b:78:45:68:3a:51:dd:b8:2e:11:c0:b3:8d:
         03:2f:2b:1e:28:ce:dc:ca:07:77:b0:9a:fb:8f:c6:99:8b:f2:
         db:b6:48:d7:6a:4c:45:ee:73:d3:30:f4:54:b9:97:7d:7d:85:
         b5:92:eb:ef:55:c8:89:e0:74:cf:48:2b:07:f8:4c:91:71:a4:
         2b:86:78:f2:67:fe:66:5a:3e:94:5e:cc:18:81:cf:bf:42:c0:
         e0:a9:f2:c2:a3:c9:d1:f8:b4:91:f6:c0:47:c8:aa:f0:bf:70:
         c0:07:35:05:e4:4b:1e:6c:9c:ad:ea:d8:34:c1:9d:86:2d:1d:
         91:56:7f:0b:9e:c1:38:b3:b3:02:9e:3b:2f:5f:42:dd:d0:f7:
         53:66:0a:ba:0b:78:51:ca:f1:30:87:98:38:e3:04:62:11:19:
         37:5b:6f:8a:c9:98:4d:a4:06:13:15:05:40:31:68:7a:62:35:
         47:6f:3d:1e:bc:a7:04:b0:c8:e5:08:1d:a8:2c:4e:9a:45:76:
         97:43:fd:03:2a:dc:6b:85:9c:da:78:35:63:56:e4:ca:5d:88:
         0b:51:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:45 2025 by rpki-client